Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/pKooiX1mjZ50gJxzLsTpAUpnMtM.roa
File: pKooiX1mjZ50gJxzLsTpAUpnMtM.roa (raw, json)
Hash identifier: uFyopHPVuLdK9Omb4AkFvN5ZqHC9doxf+f0MzAipa08=
Subject key identifier: A4:AA:28:89:7D:66:8D:9E:74:80:9C:73:2E:C4:E9:01:4A:67:32:D3
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD5304927D14B53F199EFEDFAD37FC
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/pKooiX1mjZ50gJxzLsTpAUpnMtM.roa
Signing time: Thu 02 Jan 2025 07:49:06 +0000
ROA not before: Thu 02 Jan 2025 07:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41719
IP address blocks: 62.76.141.0/24 maxlen: 24
194.190.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:53:04:92:7d:14:b5:3f:19:9e:fe:df:ad:37:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4aa28897d668d9e74809c732ec4e9014a6732d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:dd:e4:84:66:ae:05:b2:91:82:28:98:e6:
2d:34:a7:aa:5a:fb:a9:2f:c3:e3:19:4d:10:2f:1b:
6a:6d:17:67:0f:42:ab:c8:e4:ca:02:e7:00:43:0b:
37:86:bb:3e:87:e2:0b:1d:79:64:f3:6c:3e:9c:5e:
e6:f4:1e:75:c9:18:69:4f:ff:4e:c1:75:0d:5f:db:
7a:22:1d:5c:3b:38:0a:db:9b:60:bd:46:92:8d:25:
f3:2d:dd:82:5d:33:e2:9c:0f:e6:68:0b:3b:78:0e:
08:e2:6c:c3:41:be:d9:0e:0b:32:29:7f:08:b2:22:
56:6b:34:96:44:b8:02:2d:15:64:2e:4a:d8:09:26:
2f:1d:23:71:dc:d6:71:3e:c2:76:b2:ad:fb:ee:9f:
e3:54:9a:9b:cb:9f:6c:55:76:3d:73:86:ac:02:9f:
32:20:73:7b:2b:cb:26:34:7d:1f:1f:3f:33:7a:eb:
f5:cf:c9:00:ef:ca:88:fc:d1:48:5b:53:e3:d0:2b:
df:17:dc:07:bc:b6:15:14:ee:fe:fd:ef:d2:ae:0f:
5d:8e:8b:6b:17:a5:bc:67:d4:35:df:0b:70:8d:1f:
1e:25:d0:6f:c5:20:6a:cc:e2:f6:89:fc:b2:af:dd:
00:7b:a3:25:5b:5c:f1:33:ac:8a:67:bb:73:5a:7d:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AA:28:89:7D:66:8D:9E:74:80:9C:73:2E:C4:E9:01:4A:67:32:D3
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/pKooiX1mjZ50gJxzLsTpAUpnMtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.141.0/24
194.190.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3d:9e:03:40:4c:11:51:c5:21:f1:a8:6c:e0:86:55:52:3f:
8e:6d:25:c6:a5:de:34:2d:f8:59:dd:4b:e6:5a:a3:8e:de:3a:
f5:b3:4c:7c:90:e1:69:04:50:4b:7f:4f:aa:a1:11:41:b7:c2:
0e:d3:e5:3c:50:37:d2:3a:18:48:ed:65:2f:ac:2f:89:7b:28:
4f:70:12:e5:f8:66:f8:16:4d:86:54:2e:fe:d3:61:bb:69:4a:
e6:6a:d3:b6:6f:1e:d5:65:f0:b6:73:be:01:f9:04:65:7a:74:
3b:fa:b5:4a:e5:8a:c5:8e:a0:37:b8:35:e7:9f:bd:25:ed:e5:
80:cc:d9:cb:bc:85:26:9c:08:79:33:df:76:26:65:17:90:6c:
3e:1f:89:f9:58:38:9c:7b:db:e5:c7:6a:7f:00:50:03:63:86:
ad:4f:e6:cb:06:d4:3a:33:9f:d4:26:d4:23:c8:c8:ad:f1:fd:
7d:73:47:f2:f8:f3:20:d2:a7:6e:20:a7:21:c6:c3:8b:e2:e6:
0a:20:41:19:84:3b:45:21:c3:67:ac:f8:a0:a2:b3:c3:2b:7a:
c2:4e:fd:ba:04:dd:2d:a8:f9:56:3d:d0:f2:bc:23:6f:49:26:
06:98:75:c2:f9:a9:64:41:5f:57:bc:32:7b:b5:44:bf:5e:fd:
ce:30:40:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/VMEkn0UtT8Znv7frTf8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjUwMTAyMDc0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGFhMjg4OTdkNjY4ZDllNzQ4MDljNzMyZWM0ZTkwMTRhNjczMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvLd5IRmrgWykYIomOYtNKeqWvup
L8PjGU0QLxtqbRdnD0KryOTKAucAQws3hrs+h+ILHXlk82w+nF7m9B51yRhpT/9O
wXUNX9t6Ih1cOzgK25tgvUaSjSXzLd2CXTPinA/maAs7eA4I4mzDQb7ZDgsyKX8I
siJWazSWRLgCLRVkLkrYCSYvHSNx3NZxPsJ2sq377p/jVJqby59sVXY9c4asAp8y
IHN7K8smNH0fHz8zeuv1z8kA78qI/NFIW1Pj0CvfF9wHvLYVFO7+/e/Srg9djotr
F6W8Z9Q13wtwjR8eJdBvxSBqzOL2ifyyr90Ae6MlW1zxM6yKZ7tzWn0EnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKSqKIl9Zo2edICccy7E6QFKZzLTMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvcEtvb2lYMW1qWjUwZ0p4ekxzVHBBVXBuTXRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkyNAwQA
wr5FMA0GCSqGSIb3DQEBCwUAA4IBAQA8PZ4DQEwRUcUh8ahs4IZVUj+ObSXGpd40
LfhZ3UvmWqOO3jr1s0x8kOFpBFBLf0+qoRFBt8IO0+U8UDfSOhhI7WUvrC+JeyhP
cBLl+Gb4Fk2GVC7+02G7aUrmatO2bx7VZfC2c74B+QRlenQ7+rVK5YrFjqA3uDXn
n70l7eWAzNnLvIUmnAh5M992JmUXkGw+H4n5WDice9vlx2p/AFADY4atT+bLBtQ6
M5/UJtQjyMit8f19c0fy+PMg0qduIKchxsOL4uYKIEEZhDtFIcNnrPigorPDK3rC
Tv26BN0tqPlWPdDyvCNvSSYGmHXC+alkQV9XvDJ7tUS/Xv3OMEC/
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:54:14 2025 by rpki-client